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Foundations of the theory of quantum Turing machines are investigated. The pro- 
tocol for the preparation and the measurement of quantum Turing machines is 
discussed. The local transition functions are characterized for fully general quan- 
tum Turing machines. A new halting protocol is proposed without augmenting 
the halting qubit and is shown to work without spoiling the computation. 



INTRODUCTION 

The Church- Turing thesis 1, 2 states that to be computable is to be computable 
by a Turing machine and the modern discipline in computational complexity theory 3 
states that to be efficiently computable is to be computable by a Turing machine within 
polynomial steps in the length of the input data. However, Feynman 4 pointed out that 
a Turing machine cannot simulate a quantum mechanical process efficiently and sug- 
gested that a computing machine based on quantum mechanics might be more powerful 
than Turing machines. Deutsch introduced quantum Turing machines 5 and quantum 
circuits 6 for establishing the notion of quantum algorithm exploiting "quantum paral- 
lelism" . A different approach to quantum Turing machines was investigated earlier by 
Benioff 7 . Bernstein and Vazirani 8 instituted quantum complexity theory based on quan- 
tum Turing machines and showed constructions of universal quantum Turing machines. 
Yao 9 showed that a computation by a quantum Turing machine can be simulated ef- 
ficiently by a quantum circuit. Deutsch's idea of quantum parallelism was realized 
strikingly by Shor 10 , who found efficient quantum algorithms for the factoring problem 
and the discrete logarithm problem, for which no efficient algorithms have been found 
for classical computing machines. The purpose of this paper is to discuss foundations 
of quantum Turing machines and to propose a computational protocol for quantum 
Turing machines. 

A precise formulation of quantum Turing machines is given along with Deutsch's 
formulation 5 and the computational protocol is discussed for the preparation and the 
measurement of quantum Turing machines. 

The characterization of the transition functions of quantum Turing machines is 
also discussed. Deutsch 5 required that the transition function should be determined 



by local configurations. Bernstein and Vazirani 8 found a simple characterization of the 
transition functions for the restricted class of quantum Turing machines in which the 
head must move either to the right or to the left at each step but a general characteri- 
zation remains open. This problem is discussed and a solution is given. 

The computational protocol for the halting of quantum Turing machines is dis- 
cussed. In order to signal the completion of computation, Deutsch 5 introduced the halt 
flag by augmenting the halt qubit. Myers 11 pointed out a difficulty in this halting of 
quantum Turing machines. With improving the preceding work 12 , a halting protocol is 
proposed without augmenting the halting qubit and it is shown that the monitoring of 
the halt flag does not spoil the computation. 



QUANTUM TURING MACHINES 

A quantum Turing machine (QTM) Q is a quantum system consisting of a pro- 
cessor, a bilateral infinite tape, and a head to read and write a symbol on the tape. 
Its configuration is determined by the processor configuration q from a finite set Q of 
symbols, the tape configuration T represented by an infinite string from a finite set E of 
symbols, and the discretized head position £, taking values in the set Z of integers. The 
tape consists of cells numbered by the integers and the head position £ is the place of 
the cell numbered by £. We assume that Q contains two specific symbols go an d <?/ rep- 
resenting the initial configuration and the final configuration of the processor and that 
E contains the symbol B representing the blank cell in the tape. For any integer m the 
symbol at the cell m on the tape is denoted by T(m). We assume that the possible tape 
configurations are such that T(m) = B except for finitely many cells m. The set of all 
the possible tape configurations is denoted by S#. The set E* is a countable set. Thus, 
any configuration C of Q is represented by a triple C = (q, T, £) in the configuration 
space Q x E # x Z. The state of Q is represented by a unit vector in the Hilbert space 
Tt generated by the configuration space Q x E # x Z. The complete orthonormal basis 
canonically in one-to-one correspondence with the configuration space is called the com- 
putational basis. Thus, the computational basis is represented by |C) = |g)|T)|£) for 
any configuration C = (q, T, £) G Q x E # x Z; we shall write also \q,T,£) = \q)\T)\£). 

We shall denote by \X\ the number of the elements of a set X; for an indexed set 
the number of elements is understood as the number of indices. In order to define the 
observables quantizing the configurations, we assume the numbering of the sets Q and 
E such that Q = {q , . . . , q\Q\-i} and E = {cr , . . . , <7|£|_i}. We define observables q, 

T(m) for m G Z, and £ as follows. 

IQI-l |S|-1 

q = n\q n )(q n \, f(m)=^n\(j n )((j n \, |=^£|£)(£|. 

n=0 n=0 £eZ 

We assume that we have a device to prepare the quantum Turing machine in the 
state \q,T,£) for any configuration C = (q,T,£) and that we have a measuring device 

to measure sufficiently many T(m)s simultaneously. 

Let T be a finite set of symbols and T* the set of finite strings from T. In this 
paper, we shall consider computations which are probabilistic transformations on T*, 
or precisely functions from T* to the set of probability distributions on T*. The set 
T is called the alphabet of the computation. A finite string from the set T is called a 
V -string. The length of a T-string x is denoted by \x\. When |x| = 0, x is called the 
empty string. We shall identify any T-string x = (xq, . . . , xi x |_i) with a function x from 
{0, . . . , |x| — 1} to T such that x(m) = x m for all m with < m < \x\ — 1. 
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The computation by a QTM consists of encoding, preparation, time evolution, 
measurement, and decoding. The encoding transforms the input T-string to the input 
tape string. The preparation prepares the initial state of the quantum Turing machine 
with the input tape string, and the time evolution transforms the initial state to the 
final state. The measurement of the tape string in the final state gives a probability 
distribution of the output tape string. The decoding transforms the output tape string 
to the output T-string and hence transforms the probability distribution of the output 
tape string to the probability distribution of the output T-string. Therefore, the initial 
T-string is transformed to the output probability distribution of the T-string. 

The encoding e of the QTM Q is a polynomial time computable function from T* 
to £#. Thus, the encoding e transforms any T-string x to a tape configuration denoted 
by e(x); if T = e(x) we shall write T ~ x and T is said to represent the T-string x. 
Inversely, the decoding d of Q is a polynomial time computable function from £# to T* 
satisfying d(e(x)) = x for all x G T*. 

In this paper, we assume that B T and £ = T U {B}. We assume that there is 
an infinite subset S C N of the set of tape cells, called the data slot, with polynomial 
time numbering S = {mi, m 2 , . . .} and that the encoding is such that 

/ w x f x(n) if m = m n G S and < n < \x\, / 1N 
e(s)(m) = | ^ otherwise, ~ W 

for any x G £*, and the decoding is given by 

\d(T)\ = mm{m n G S\ T(m n ) = B}, (2) 
d(T)(n) = T(m n ) (3) 

for < n < \d(T)\, where T G S # . 

The computation begins at t — 0. At this time Q is prepared in an initial state 
| C ) such that 

|C ) = |go)|T m )|0), (4) 

where T in represents some T-string x. In this case, T in is called the input tape, x is 
called the input, and \x\ is called the injmi length. 

The computation proceeds in steps of a fixed unit duration r. Since the position 
of the head is discretized, the wave function \ip(t)) may not stay within ri at any time t 
other than integer multiples of r. We assume therefore that the time t is discretized to 
be an integer multiple of r. We also take the normalized unit of time in which the time t 
is assumed to take values in Z. The dynamics of Q are described by a unitary operator 
U on ri which specifies the evolution of any state \ip(t)) during a single computational 
step so that we have 

U^U = UU ] = I, (5) 

\m) = u t mo)) (6) 

for all positive integer t. 

Since the number of all the possible tape strings in the data slot is countable, we 
assume them to be indexed as {Ti, T 2 , . . .}. Thus, the observable T(S) describing the 
tape string in the data slot can be represented by 

oo 

f (S) = ]T Xj h ® \Tj)(Tj\ ® h ® h 

where {Ai, A2, • • •} is a countable set of positive numbers in one-to-one correspondence 
with {Ti,T 2 , . . .} by a polynomial time function and where I\ is the identity on the 
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state space spanned by the processor configurations Q, I2 is the identity on the state 
space spanned by the tape strings outside the data slot, and ^3 is the identity on the 
state space spanned by the head positions Z. 

We assume that the measurement to obtain the output is allowed only for the 
computational basis or more specifically the observable T(S) describing directly the 
output symbol string on the tape, while in Deutsch's formulation 5, 6 and in later work 
no such restriction has been taken place. However, it is an unavoidable assumption in 
the definition of quantum Turing machine. In fact, if this assumption is dropped, any 
function would computable without any computational time. To see this, suppose that 
the tape strings are encoded by the natural numbers. Let \T n ) be the computational 
basis state, ignoring the inessential degeneracy, in which the output tape string is the 
one encoded by n and let T be the observable such that T\n) = n\T n ). Only such T 
is allowed to measure for obtaining the output. Otherwise, given any function / of the 
natural numbers and a natural number n, if one prepares the tape in the state \T n ) and 

measures the observable f(T), one gets f(n) surely without any computation. This 
contradicts the Church- Turing thesis. Thus, we cannot allow even the measurement of 
f(T) unless / is a polynomial time computable function. 



LOCAL TRANSITION FUNCTIONS 

Deutsch 5 requires that the QTM operate finitely, i.e., (i) only a finite system is 
in motion during any one step, (ii) the motion depends only on the state of a finite 
subsystem, and (iii) the rule that specifies the motion can be given finitely in the 
mathematical sense. To satisfy the above requirement, the matrix elements of U takes 
the following formu: 

(q', T', ?\U\q, T, = [5l^D(q, q', 1) + $D{q, T(0,q', T'(£), 0) 

+ 5lr 1 D(q,T(0,q',T'(0-l)} ]J 5^ (7) 

for any configurations (<?, T, £) and (</, T", £'). The continued product on the right 
ensures that the tape is changed only at the head position £ at the beginning of each 
computational step. The terms 5|/ ±:L , 8^, ensure that during each step the head position 
cannot change by more than one unit. The function D(q,T(£),q',T'(£),d), where 
q, q' G Q, T(£), T"(£) G S, and d G { — 1, 0, 1}, represents a dynamical motion depending 

only on the local observables q and T(0- We call D the local transition function of the 
QTM Q. 

The function D can be arbitrarily given except for the requirement (5) that U 
be unitary. Each choice defines a different QTM Q[-D]. Thus, if we have an intrinsic 
characterization of the local transition function D, QTMs can be defined formally 
without referring to the unitary operator U as a primitive notion. 

From (7), the time evolution operator U is determined conversely from the local 
transition function D 

U\q,T,0 = ]T D(q,T(Z),p,T,d)\p,T{,Z + d). (8) 

p,r,d 



*This condition is a natural extension of Deutsch's condition 5 to the case where the head is not required 
to move. 
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for any configuration (g,T, £), where TJ is the tape string defined by 

w={r (m ) lf™;f: < 9 ) 

It follows that the relation D(q, a, q', T,d) = c can be interpreted as the following 
instruction of the operation of Q: if the processor is in the configuration q and if the 
head reads the symbol a, then it follows with amplitudes c that the processor's state 
turns to q', the head writes the symbol r, and that the head moves one cell to the right 
if d — 1, to the left if d = —1, or does not move if d = 0. 

Now we can formulate the characterization problem of local transition functions 
of QTMs: Let D be a complex-valued function onQxHxQxHx { — 1, 0, 1} and let 
U be the operator on Ti. defined by (j^). Then, what conditions ensure that the operator 
U is unitary? 

This problem is solved by the following theorem. 13 

Theorem 1 The operator U is unitary if and only if D satisfies the following condi- 
tions. 

(a) For any (g, cr) G Q x E ; 

J2\D(q,a,p,r,d)\ 2 = l. 

p,r,d 

(b) For any (q, a), (q', a') G Q x £ with (q, a) ^ (q 1 , a'), 

D (l'i ° P> r ' d Y D (<li °> Pt T ; d ) = °- 

p,r,d 

(c) For any (q, a, r), (q', a', r') G Q x E 2 ; we /lave 

£ L>(g', a', p, r', a, p, r, -1) = 0. 

(d) For any (q, a, r), (g', a', r') G Q x T? , we have 

D{q', a', p, t', d - l)*D{q, a, p, r, d) = 0. 

p€Q,d=0,l 

If it is assumed that the head must move either to the right or to the left at each 
step, the condition (d) is automatically satisfied. In this case, the above statement is 
reduced to the result due to Bernstein and Vazirani 8 . 

In order to maintain the Church- Turing thesis, we need to require that the unitary 
operator U is constructive, or that the matrix elements of U in the computational 
basis are computable complex numbers; otherwise, we cannot show the existence of 
the algorithm by the constructive language. From the complexity theoretical point 
of view, we need also to require that matrix elements are polynomially computable 
complex numbers. Thus, we require that the range of the transition function 5 is in 
the polynomially computable complex numbers. 
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HALTING PROTOCOL 



The result of a computation is obtained by measuring the tape string after the 
computation has been completed. Unlike the classical case, the machine configuration 
cannot be monitored throughout the computation because of the inevitable disturbance 
caused by measurement. Thus, the machine needs a specific halt scheme to signal 
actively when the computation has been completed. 

Deutsch 5 introduced an additional single qubit, called the halt qubit, together 
with an observable no, called the halt flag, with the eigenstates |0) and |1), so that the 
processor configuration q is represented by the state vector \q)\l) if q is the final state 
in the classical picture or by \q)\0) otherwise. The halt qubit is initialized to |0) before 
starting the computation, and every valid quantum algorithm sets the halt qubit to 1 1) 
when the computation has been completed but does not interact with the halt qubit 
otherwise. Deutsch claimed that the observable n can then be periodically observed 
from the outside without affecting the operation of the machine. 

Myers 11 argued that the state entangles the non-halt qubits with the halt qubits 
so that the measurement of the halt flag changes the state and concluded that the halt 
scheme spoils the computation. 

In the preceding work 12 , Deutsch's halt scheme is reformulated precisely and it 
is shown that, even though it changes the state of the quantum Turing machine, the 
measurement of the halt flag does not change the probability distribution of the outcome 
of the computation so that it does not spoil the computation. It is also shown 12 that 
the halt scheme is equivalent to the quantum nondemolition monitoring of the output 
observable. 

In what follows, we shall give a new formulation of the halt scheme in which the 
additional halt qubit is not augmented. 

The halt flag ho is defined to be the observable corresponding to the projection on 
the final configuration of the processor, i.e. 

n = \q f )(q f \. (10) 

We assume that we have a measuring apparatus to measure no precisely after each 
step instantaneously in the manner satisfying the projection postulate. Thus the no- 
measurement gives surely the outcome 1 if and only if the processor is in \qj). We 

shall denote by \A = a] the spectral projection onto the eigenspace of an observable 
A, considered as an operator on 7i, corresponding to the eigenvalue a. The product 
\A = a\\B = 6], if commutable, will be denoted by \A — a, B — b\. 
The precise formulation of the halting protocol is given as follows. 

(I) The halt flag no is measured instantaneously after every step. This measure- 
ment is a precise measurement of the observable no satisfying the projection postulate. 
(Note that the above measurement is different from the procedure that one measures q 
and checks if the outcome is qf because this does not satisfy the projection postulate.) 

(II) Once the halt flag is set to no = 1, the QTM no more changes the halt flag 
nor the result of computation. Thus, we require 

U\no = l,f(S) = TjjU'lC) = [n = l,f(S) = T 3 \U[ho = l,f(S) = T 3 \U l \C) (11) 

for any initial configuration C, time t > 0, and tape string Tj over the data slot S. 

(III) After the measurement of the halt flag n gives the outcome 1, the tape string 

T(S) in the date slot is measured and the outcome of this measurement is defined to 
be the output of the computation. 
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Now we shall show that the halting protocol does not affect the result of the 
computation. For that purpose, it suffices to prove that the probability distribution of 
the output is not affected by monitoring of the halt flag. 

Let Pr{output = I)| monitored} be the probability of finding the output Tj up to 
N steps by the halting protocol. Let Pr{output = Tj\ not-monitored} be the probability 
of finding the output Tj by the single measurement after N steps. We shall prove 

Prjoutput = Tj | monitored} = Prjoutput = Tj\ not-monitored} (12) 

Let P = [ho = 1] and Qj = {T(S) = TjJ. Let \C) be an arbitrary initial state. If 
\C) is the state of the machine before the computation, We have 

Pr{output = Tj | not-monitored} = \\PQjU N \C)f. (13) 

By the projection postulate, the joint probability of obtaining the outcome no = at 
the times 1, . . . , K — 1 and obtaining the outcomes h = 1 and T = Xj at the time K 
is given by 

\\PQj(UP^) K \C}\\ 2 , (14) 

and hence we have 

Prjoutput = Tj | monitored} 

= \\PQ 3 \C)\\ 2 + IIPQ.OT^)!! 2 + • ■ ■ + ||PQ,(l^nC>|| 2 . (15) 

Thus, it suffices to prove the relation 

\\PQ 3 U N \C)\\ 2 = \\PQ 3 \C)\\ 2 + UPg^P^IC)!! 2 + • • • + \\PQ 3 {UP L ) N \C)\\ 2 (16) 

for any iV and any initial state \C). 

Let tj} =U t \C) where t > 0. We first consider the relation 

\\PQ 3 Uij\\ 2 = \\PQM 2 + WPQjUP^f. (17) 



PQjUPQjip = UPQjtp. (18) 
PQ.UPQfij = PQjUPQ k ^ = 0. (19) 



From (PD , we have 
It follows that 



From ( PTB[ ) and (Tl9|), we have 



PQjUi/j = PQjUPQjij; + PQ.UPQfiP + PQjUP^ 

= UPQji) + PQjUP L i). (20) 



From (1I8D, we have 



(UPQjiPlPQjUP^) = (PQjUPQjiPlUP^) 

= (UPQ^IUP^) 



0, (21) 
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From (20) and (21), we have 



\\PQjUiPW 2 = WUPQ^ + PQjUP^W 2 

|2 i II n/^ TTD±„m2 



\UPQ^\\ Z +\\PQ,UP A 
Wf + \\PQjl 



\PQM 2 +\\PQiUP L n 2 (22) 



Thus, we have proved (|17D . 

The proof for general A" runs as follows. We use mathematical induction and 
assume that (|TB) holds for N — 1. By replacing ^ by U N ~ X \C) in (I?D, we have 



|| PQ 3 U N | C) || 2 = WPQ^^CW + WPQ.UP^-^C)^ . (23) 

From (HD, we have P^UPip = J2j P^UPQjtfj = 0, and hence P^Uip = P^UP^ifj so 
that P L U N ~ l \C) = P ± ( y UP ± ) N ~ l \C). It follows that 

HPQ^P^- 1 ^)!! 2 = WPQ^UP^f^f. (24) 

By induction hypothesis, we have 

HPQ^- 1 ^)!! 2 = ||PQ,|C)|| 2 + HPQ^P^IC)!! 2 + ■ • ■ + WPQ^UP^f-'lCn 2 . (25) 



Therefore, from (|2"3"D, (p4"|), and (^), we obtain 

It is concluded that the the probability of "finding the output Tj up to A" steps 
by the halt protocol is equal to the probability of finding the output by the single 
measurement of T(S) after iV steps. It follows that the halting protocol does not affect 
the result of the computation. 

Recently, Linden and Popescu 14 claimed that the halt scheme given previously 12 
is not consistent with unitarity of the evolution operator. However, their argument 
applies only to the special case in which the whole tape is required not to change after 
the halt. As suggested in a footnote, the conclusion in the previous work 12 can be 
obtained from the weaker condition for the general case where the tape is allowed to 
change except for the date slot. Linden and Popescu 14 disregarded this case and hence 
their conclusion is not generally true. In this paper, the halting protocol with such 
a general formulation is treated explicitly and it is proved that even in this case the 
computation is not affected by the measurement of the halt flag. Moreover, contrary to 
Linden and Popescu 14 , this general formulation is consistent with the unitarity. In fact, 
it can be shown that any unidirectional QTMs and stationary QTMs 8 can be simulated 
by QTMs obeying this halting protocol with constant slowdown 13 . Thus, there is a 
universal QTM obeying the halting protocol. 
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